Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/323830343a3564383a3a2f33322d3332203d3e20323632353436.roa
File:                     323830343a3564383a3a2f33322d3332203d3e20323632353436.roa (raw, json)
Hash identifier:          HzerCNzV45427zn30EA3q3L0g94bhrbfgE+E5/Vx4hE=
Subject key identifier:   82:20:2F:A3:E8:64:14:B0:20:10:50:A4:47:42:7E:1D:F7:61:99:54
Certificate issuer:       /CN=7601FABE684263D9F7C5334E8ACFF4C84F5491C4
Certificate serial:       763D1B37916E9EB2D7EEC480B477E164F7BA58C4
Authority key identifier: 76:01:FA:BE:68:42:63:D9:F7:C5:33:4E:8A:CF:F4:C8:4F:54:91:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/323830343a3564383a3a2f33322d3332203d3e20323632353436.roa
Signing time:             Mon 28 Oct 2024 17:00:02 +0000
ROA not before:           Mon 28 Oct 2024 16:55:02 +0000
ROA not after:            Mon 27 Oct 2025 17:00:02 +0000
asID:                     262546
IP address blocks:        2804:5d8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.crl
                          rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:1b:37:91:6e:9e:b2:d7:ee:c4:80:b4:77:e1:64:f7:ba:58:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7601FABE684263D9F7C5334E8ACFF4C84F5491C4
        Validity
            Not Before: Oct 28 16:55:02 2024 GMT
            Not After : Oct 27 17:00:02 2025 GMT
        Subject: CN=82202FA3E86414B0201050A447427E1DF7619954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8e:34:e3:3f:ae:3a:b2:75:b7:c9:39:19:92:
                    bb:5d:6d:84:d7:d0:cf:75:25:94:ba:45:f4:f4:29:
                    7e:98:69:2f:59:30:ca:30:1a:9d:21:3b:01:0d:e4:
                    9f:09:c3:a2:2e:03:91:a2:59:ce:91:7b:33:67:f1:
                    7a:35:30:68:1f:a5:47:ae:c0:94:42:d8:f2:00:28:
                    f7:1f:07:37:d8:2d:6b:c7:4a:af:17:7c:61:79:7a:
                    6c:d4:83:06:03:34:2e:59:37:5e:23:03:4a:17:35:
                    b1:6a:49:93:d0:39:a7:e6:3d:7b:93:8b:46:3c:5f:
                    53:56:6b:0c:a1:d1:36:3a:46:5b:f7:31:cb:f4:0b:
                    ba:45:aa:94:63:6f:25:41:c5:7e:a3:cf:9b:67:d4:
                    f1:a5:0c:e7:1b:ba:5e:b8:49:90:c9:07:1d:2c:8d:
                    a7:7f:94:f3:0b:3d:9a:d2:9f:16:37:b9:3c:c9:fe:
                    fb:dd:cd:40:0c:b8:d2:2d:0d:b3:c8:8b:ef:3a:49:
                    8e:24:04:22:50:3a:43:60:34:71:bd:80:6c:80:fb:
                    9f:0e:07:5a:70:e0:14:b5:9a:b3:e5:ba:86:b8:70:
                    fa:d9:91:1f:f8:00:ca:66:fa:92:14:39:2f:fd:95:
                    0b:9b:30:47:99:d7:b6:47:4b:2e:42:6a:fc:e4:59:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:20:2F:A3:E8:64:14:B0:20:10:50:A4:47:42:7E:1D:F7:61:99:54
            X509v3 Authority Key Identifier:
                keyid:76:01:FA:BE:68:42:63:D9:F7:C5:33:4E:8A:CF:F4:C8:4F:54:91:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/323830343a3564383a3a2f33322d3332203d3e20323632353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:eb:7c:76:92:14:73:0f:cd:43:4f:77:84:93:38:8f:8e:56:
         be:1f:d4:27:0c:27:67:56:b0:7e:f3:a0:f6:f9:e5:92:f5:84:
         54:0e:a9:a9:0e:01:f6:c5:bc:7c:cf:5a:ca:ba:6a:8a:0c:4a:
         10:85:a2:44:8f:2a:1f:40:dc:84:94:39:05:53:e5:81:df:e6:
         d9:23:97:29:bb:91:64:4a:a1:56:46:ed:38:d1:09:61:2f:93:
         89:7d:eb:6a:b5:4c:87:26:f2:a7:c5:79:aa:b8:a3:5f:8d:6c:
         ce:2a:a6:d8:b1:7d:d5:85:2e:13:09:64:11:f1:83:48:7a:5c:
         16:a0:f9:89:43:6b:0c:1b:60:45:2d:e6:3e:99:a8:bf:db:62:
         07:ea:79:fe:a8:93:99:f7:36:0c:bb:cc:0d:7c:47:5c:46:a5:
         d0:cc:aa:9b:43:26:56:e0:56:39:2d:05:d4:6a:f8:24:7f:7c:
         f5:31:cd:48:44:34:76:2b:24:44:db:17:a1:7a:ed:5a:1a:d2:
         39:47:9b:63:94:f4:0c:92:5f:3c:db:2b:39:52:cf:92:b8:20:
         f9:c9:b3:4c:72:f6:f7:78:da:6d:bd:31:3b:d8:96:48:f6:25:
         12:33:d7:63:68:bd:2f:b6:a1:e4:ca:ef:69:dc:e6:e7:fd:d7:
         41:37:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:04 2024 by rpki-client on console-fra.rpki-client.org